jira-alerts-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Host for HTTP transport. Defaults to 127.0.0.1. | 127.0.0.1 |
| PORT | No | Port for HTTP transport. Defaults to 3000. | 3000 |
| JSM_EMAIL | No | Your Atlassian account email, used with JSM_API_TOKEN. | |
| TRANSPORT | No | Transport to use: 'stdio' (default) or 'http'. | stdio |
| JSM_CLOUD_ID | Yes | Your Atlassian site's cloud id (a UUID). | |
| ALLOWED_HOSTS | No | Comma-separated Host allowlist. Required if HOST is set beyond loopback - see SECURITY.md. | |
| JSM_API_TOKEN | No | Your Atlassian API token, created at https://id.atlassian.com/manage-profile/security/api-tokens. | |
| JSM_OAUTH_TOKEN | No | OAuth 3LO bearer token; takes precedence if set. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| jsm_list_alertsA | Search and list alerts in Jira Service Management Operations. This is the entry point for almost every alert workflow: use it to find open or unacknowledged alerts, filter by priority/team/tag, and to resolve a short tinyId (as shown in the JSM UI) into the full alert id that every other alert tool requires. It reads only — it never creates or modifies alerts. Args:
Returns (json format): { "alerts": [ { "id": string, // full alert id — pass this to other tools "tinyId": string, // short id shown in the JSM UI "message": string, "status": "open" | "closed", "acknowledged": boolean, "priority": "P1".."P5", "count": number, // dedupe count "tags": string[], "owner": string, "createdAt": string, // ISO 8601 "lastOccurredAt": string } ], "pagination": { "count": number, "offset": number, "has_more": boolean, "next_offset": number } } Examples:
Constraints and errors:
|
| jsm_get_alertA | Retrieve the full detail of a single JSM alert, including its description, custom details/extraProperties, responders, tags and dedupe count. Use this after jsm_list_alerts when you need the payload an integration attached to the alert (host, service, metric values, runbook links) — the list endpoint returns a thinner record without the description or details map. Args:
Returns (json format): a single alert object with id, tinyId, message, description, status, acknowledged, snoozed, priority, source, owner, tags, responders, details (custom key/value map), extraProperties, count, createdAt, updatedAt, lastOccurredAt, and a report block with acknowledgedBy/closedBy. Responder ids are resolved to names where the credentials allow it. Examples:
Error handling:
|
| jsm_list_alert_notesA | List the notes (human comments) recorded on a JSM alert's activity timeline, newest first by default. Notes are where responders write triage context, and where integrations append re-fire and resolution updates for a deduplicated alert. Read them before acting on an alert so you don't repeat work someone already did. Args:
Returns (json format): { "notes": [{ "note": string, "owner": string, "createdAt": string, "offset": string }], "pagination": { "count": number, "has_more": boolean, "next_cursor": string } } Examples:
Note: these endpoints page with opaque cursors, not numeric offsets — pass next_cursor back as 'offset'. |
| jsm_list_alert_logsA | List the system activity log for a JSM alert — every state transition, notification, escalation and automated action, newest first by default. Use this to answer "why did nobody get paged?" or "when was this escalated and to whom?". Logs are system-generated; human comments live in jsm_list_alert_notes instead. Args:
Returns (json format): { "logs": [{ "log": string, "owner": string, "createdAt": string, "type": string, "offset": string }], "pagination": { "count": number, "has_more": boolean, "next_cursor": string } } Examples:
|
| jsm_get_request_statusA | Check whether an asynchronous alert action actually succeeded. Every JSM alert write (acknowledge, close, add note, assign, snooze) returns immediately with a requestId and does NOT apply the change synchronously. Pass that requestId here to confirm the action landed — this is the correct way to verify a write, rather than immediately re-reading the alert and finding it unchanged. Args:
Returns (json format): { "action": string, // e.g. "Acknowledge" "isSuccess": boolean, "status": string, // human-readable outcome, e.g. "Alert acknowledged" "processedAt": string, // ISO 8601 "alertId": string, "alias": string } Examples:
Error handling:
|
| jsm_create_alertA | Create a new alert in Jira Service Management Operations. This pages people. A created alert enters the team's routing and escalation rules exactly as one raised by a monitoring integration would, so someone's phone may ring. Create one when a human wants an incident tracked and escalated — not to leave a note, which is jsm_add_alert_note, and not to record something nobody needs to act on. Args:
There is no 'user' argument, unlike the other write tools: this endpoint has no actor override, and the alert is created as the owner of the credentials. Returns: { "requestId": string, "result": string, "alias": string } IMPORTANT: this is asynchronous, and it does not return the new alert's id. The response confirms the request was accepted, not that an alert exists. Unusually for this API the status code is 200 rather than 202, which does not make it synchronous. To get the id: call jsm_get_request_status with the returned requestId, or — if you set an alias — jsm_get_alert with identifier_type='alias'. Alias is the de-duplication key, and it is the difference between a safe retry and a silent no-op. Creating with an alias that already has an OPEN alert does not create a second alert; it increments the existing one's count and leaves everything else alone. That makes a retried create safe. It also means reusing an alias from an earlier, still-open incident quietly does nothing visible — so make aliases specific to the occurrence, not to the check. Examples:
Constraints and errors:
|
| jsm_acknowledge_alertA | Acknowledge an open JSM alert, stopping further escalation notifications for it. Acknowledging signals that a human has picked the alert up. It does not resolve the alert — use jsm_close_alert for that. Acknowledging an already-acknowledged alert is a no-op. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. The response confirms the request was accepted, not that the alert changed. Verify with jsm_get_request_status using the returned requestId. Examples:
|
| jsm_unacknowledge_alertA | Return an acknowledged JSM alert to unacknowledged, so escalation notifications resume. Use this when someone acked an alert they cannot actually work — picked it up by mistake, or got pulled onto something else — and it needs to go back into the escalation path so the next responder is paged. It does not close, snooze or reassign the alert. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. This restarts paging. Say so before doing it on someone's behalf — the practical effect is that a phone rings. Examples:
Constraints and errors:
|
| jsm_snooze_alertA | Silence a JSM alert's notifications until a specific instant, after which it resumes as if untouched. Snoozing is the right tool for "we know, and there is nothing to do until the maintenance window ends" — it stops the paging without pretending the alert is resolved. Closing it would remove it from the open queue and lose the fact that it is still an open problem. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Time handling is the sharp edge here. end_time is an absolute instant, not a duration — "snooze for two hours" means computing the instant yourself from the current time. A past instant is accepted, and the alert un-snoozes immediately, which looks exactly like the call having failed. Send an explicit offset ('Z' or '+05:30') rather than a bare local time. Examples:
Constraints and errors:
|
| jsm_assign_alertA | Make one person the owner of a JSM alert, so it is clear who is working it. Assigning names an owner; jsm_add_alert_responder adds people to notify without taking ownership away. Reach for this when triage has decided whose problem it is, and for that one alert rather than a class of them — routing rules, not assignment, are how a class of alerts finds its team. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. account_id is an Atlassian account id, not an email address and not a display name. It looks like '712020:9ae5385e-6a4c-4f0e-9c02-6f8a1e21d7b1'. Both other forms are rejected. To find one: jsm_get_on_call and jsm_get_alert both return account ids for the people they name, so read the id from there rather than guessing from a name. Examples:
Constraints and errors:
|
| jsm_escalate_alertA | Push a JSM alert into an escalation policy immediately, rather than waiting for it to escalate on its own. Use this when an alert is not getting picked up and waiting out the escalation timer is not acceptable. It pages the next people in that policy now. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. This pages people out of band, ahead of the schedule they agreed to. Confirm with the user before escalating on their behalf. escalation_id is an escalation policy id — not a team id and not a schedule id. The three are separate objects with separate ids, and passing the wrong one fails with 422 rather than escalating to something adjacent. Examples:
Constraints and errors:
|
| jsm_close_alertA | Close a JSM alert, marking it resolved and ending all notifications for it. Closing is how an alert leaves the open queue. Treat it as effectively one-way: a closed alert cannot be reopened through this API, and a recurring condition will create a fresh alert (or increment a deduplicated one) rather than reviving this record. Prefer jsm_acknowledge_alert while work is still in progress. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Examples:
Don't use when: the alert is still being worked — acknowledge instead. |
| jsm_update_alert_fieldA | Overwrite one field on an existing JSM alert: its priority, its message, or its description. This is how an alert gets corrected once triage knows more than the integration that raised it did — a P3 that turns out to be customer-facing, a message that says "check failed" when it should say which check, a description that should carry what has been tried. Args:
There are no 'user' or 'source' arguments here, unlike the other write tools: these three endpoints take only the value. Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. This overwrites, it does not append. Reading the current value first with jsm_get_alert is the difference between adding context to a description and destroying what someone else wrote in it. If you mean to add to the record without replacing anything, use jsm_add_alert_note instead — notes are additive and are what the activity timeline is for. For field='priority', value must be exactly one of P1, P2, P3, P4, P5 — not "high", not "1", not "p1". Examples:
Constraints and errors:
|
| jsm_add_alert_noteA | Append a note to a JSM alert's activity timeline without changing its state. Use this to record triage findings, link a runbook or dashboard, or leave context for the next responder. It does not acknowledge, close, or reassign the alert. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Examples:
|
| jsm_update_alert_noteA | Replace the text of an existing note on a JSM alert. Use it to correct a note you just wrote — a wrong hostname, a stale conclusion. Prefer adding a new note with jsm_add_alert_note for anything that reads as a development rather than a correction: the timeline is the record of what responders knew and when, and editing history out of it costs more than an extra line. Args:
Returns the updated note: { "alert_id", "note_id", "note", "owner", "createdAt", "updatedAt" } Unlike every other alert write, this one is synchronous. It answers with the note itself, so there is no requestId and nothing to verify with jsm_get_request_status. This replaces the note's whole text. There is no append. Read the note first if you mean to add to it. Examples:
Constraints and errors:
|
| jsm_delete_alert_noteA | Permanently remove a note from a JSM alert's timeline. Reach for this only for a note that should never have been written — a pasted credential, someone's personal information, a note on the wrong alert. Not for a note that turned out to be wrong: that is what jsm_update_alert_note is for, and being able to see what a responder believed at the time is most of what the timeline is worth. Args:
Returns: { "deleted": true, "note_id": string } There is no undo, and no confirmation step at the API. The note is gone the moment this returns. Confirm with the user before calling it, and quote the note's text back to them first so they are deleting the thing they think they are. Unlike most alert writes this is synchronous: the API answers 204 with no body, so there is no requestId to verify. Constraints and errors:
|
| jsm_add_alert_tagsA | Add one or more tags to a JSM alert. Tags are additive — existing ones stay. Tags are how alerts get grouped and found later: jsm_list_alerts can filter on them (tag:"db"), and they are what turns a scattering of individual alerts into "the seventeen from last night's storage incident". Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Tags are case-sensitive. 'DB' and 'db' are two tags, and searches will not find one by the other — so match whatever the team already uses rather than inventing a casing. Examples:
|
| jsm_remove_alert_tagsA | Remove one or more tags from a JSM alert. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Removal matches exactly and is case-sensitive, so removing 'DB' leaves 'db' in place. Read the alert's current tags with jsm_get_alert first rather than guessing the casing — a removal that silently matches nothing still returns a successful receipt. Constraints and errors:
|
| jsm_add_alert_extra_propertiesA | Attach arbitrary key/value context to a JSM alert, or overwrite properties already on it. Extra properties are the structured half of an alert, next to the prose in its description: a runbook link, the region, the deploy that preceded it, a trace id. Unlike a note they can be read back programmatically by whatever picks the alert up next. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. This merges by key: keys not mentioned are left alone, and a key that already exists is overwritten without warning. Read the alert first with jsm_get_alert if you need to know what a key currently holds. Examples:
|
| jsm_remove_alert_extra_propertiesA | Remove properties from a JSM alert by key. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. A key that is not present is not an error, so a receipt here does not prove anything was removed. Read the alert back if that matters. Constraints and errors:
|
| jsm_add_alert_responderA | Add a responder (user, team, escalation or schedule) to an existing JSM alert so they are notified and become accountable for it. Use this to pull in another team once triage shows the alert belongs elsewhere. Responders are additive — this does not remove the existing ones. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Examples:
Error handling:
|
| jsm_execute_alert_actionA | Run one of your organisation's own custom alert actions — the buttons a team wires up on an integration, like "Restart service" or "Roll back deploy". What these do is entirely up to whoever configured them, and this server cannot see it. An action name is a request to run somebody's automation against production. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Do not guess an action name. There is no endpoint that lists them, so a plausible-sounding guess is exactly as likely to be a real destructive automation as it is to be nothing. An unrecognised name is accepted and silently does nothing, which means a successful receipt is not evidence that anything ran. Ask the user which action they mean, and confirm before running it. Constraints and errors:
|
| jsm_delete_alertA | Permanently delete a JSM alert and everything recorded on it. This is almost never the right tool. Closing an alert with jsm_close_alert takes it out of the open queue and keeps the record: who was paged, what they tried, when it resolved. Deleting throws that away, for everyone, with no undo — the notes, the activity log, the attachments and the timing all go with it. A closed alert costs nothing to keep. The cases that justify it are narrow: an alert containing credentials or personal data that must not persist, or a flood of alerts from a misconfigured integration that never represented anything real. Args:
Returns: { "requestId": string, "result": string, "alert_id": string } IMPORTANT: this action is asynchronous. Verify with jsm_get_request_status using the returned requestId. Before calling this, read the alert back with jsm_get_alert and show the user what they are about to lose — its message, its state and how many notes it carries — and get an explicit yes. Never call it to tidy up, to clear a queue, or in a loop over search results. Constraints and errors:
|
| jsm_list_schedulesA | List the on-call schedules configured in JSM Operations, with their ids, owning teams and timezones. Start here when you need a schedule id for jsm_get_on_call or jsm_get_next_on_call, or when you want to know which rotations exist at all. Args:
Returns (json format): { "schedules": [ { "id": string, "name": string, "description": string, "timezone": string, "enabled": boolean, "ownerTeam": { "id": string, "name": string } } ], "pagination": { "count": number, "offset": number, "has_more": boolean, "next_offset": number } } Examples:
Error handling:
|
| jsm_get_on_callA | Return the responders currently on-call for a JSM schedule, optionally evaluated at a past or future timestamp. This is the tool for "who do I wake up?" and, with the 'date' argument, for "who was on-call when this incident started?" — which is often the more useful question during a post-incident review. Args:
Returns (json format): { "on_call": { ... }, // the API response, unmodified "participants": [ // resolved, and the field to read { "id": string, "type": string, "displayName": string, "emailAddress": string } ] } Responders are Atlassian account ids; this tool resolves them to names for you, so there is no need to look an id up elsewhere. If the credentials lack the Jira user scope the ids are still returned, with a note saying so. Examples:
Error handling:
|
| jsm_get_next_on_callA | Return the responders who take over the next shift on a JSM schedule, and when that shift begins. Use this for handover messages and for deciding whether an alert can wait for the next rotation. Args:
Returns (json format): { "next_on_call": { ... }, // the API response, unmodified "participants": [ // resolved, and the field to read { "id": string, "type": string, "displayName": string, "emailAddress": string } ] } Responders are Atlassian account ids; this tool resolves them to names for you. If the credentials lack the Jira user scope the ids are still returned, with a note saying so. Examples:
Error handling:
|
| jsm_get_schedule_timelineA | Return the on-call rotation periods for a JSM schedule — who covers each shift, and exactly when each shift starts and ends. This is the tool for any question about shift boundaries rather than a single moment: "when does the current shift end?", "when is the handover?", "who covers the weekend?", "show me next week's rota". Answering those by calling jsm_get_on_call at guessed timestamps takes many calls and still cannot find a boundary exactly; this takes one. Responders are resolved to names, so periods come back with people rather than bare account ids. Args:
Returns (json format): { "shifts": [ { "start": string, // ISO 8601 "end": string, // ISO 8601 "rotation_name": string, "type": "base" | "override" | "forwarding" | "historical", "responders": [ { "id": string, "displayName": string, "emailAddress": string } ] } ] } The window spans roughly three weeks around the requested date, so both the shift in progress and the ones on either side of it are included. Examples:
Error handling:
|
| jsm_list_capabilitiesA | Report every toolset this server knows about, whether it is currently loaded, and how to load one that is not. Call this before telling the user something is impossible. This server carries far more of the Jira Service Management Operations API than any one install registers — the operator chooses which families load, so an absent tool usually means "not enabled here", not "not supported". This tool tells you which of the two it is, and names the exact environment variable to change. It takes no arguments, makes no API call, and needs no credentials, so it also answers when the token is missing or wrong. Args: none beyond response_format.
Returns (json format): { "requested": string[], // the names this process was configured with "read_only": boolean, "tool_count": number, // tools actually registered "toolsets": [ { "name": string, "enabled": boolean, // whether any of its tools are registered "selected": boolean, // whether the selection asked for it; false enabled with true // selected means read-only mode withheld the tools "summary": string, "scopes": string[], // OAuth scopes this family needs "tool_count": number, "tools": string[], "unverified": string // present only when the family was never seen to work } ] } A toolset carrying Examples:
Note: changing JSM_TOOLSETS requires restarting the server. You cannot enable a toolset from inside a conversation. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 28 tools
Every tool maps to a distinct resource and action, and the descriptions actively call out neighboring tools to prevent confusion (e.g. logs vs notes, create vs add note, close vs delete, current vs next on-call). There is no pair of tools that appears to do the same thing.
All tools share the jsm_ prefix and follow a snake_case verb_noun pattern, with consistent list/get/update/delete pairs throughout. Minor deviations exist between create_alert vs add_alert_* for creating versus attaching, and delete vs remove for notes versus tags/properties, but the conventions are still predictable.
28 tools is on the high side, though the server covers two related domains—alert lifecycle and on-call schedules—plus async verification and capability discovery. The granularity is justified by distinct operations, but the surface is heavy for an agent to scan at a glance.
The alert lifecycle is thoroughly covered: create, read, list, update, acknowledge, snooze, close, delete, assign, escalate, responders, notes, tags, extra properties, and logs. Notable gaps are the lack of a remove-responder tool and no way to list escalation policies, teams, or custom action names, which sometimes forces the user to supply ids manually.